Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json)
Hash identifier: l6AJ+TCqF3bYxRKfwH75+dD6orKRMJtw7JuNJueJcx4=
Subject key identifier: DD:76:DE:AC:27:3C:A7:A4:78:E5:89:EC:B9:5D:9D:5F:48:BB:E9:56
Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2
Certificate serial: 019685ED89A623FB73FCE9E98F1085C5541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
Manifest number: 0B92
Signing time: Wed 30 Apr 2025 09:00:59 +0000
Manifest this update: Wed 30 Apr 2025 09:00:59 +0000
Manifest next update: Thu 01 May 2025 09:00:59 +0000
Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=)
2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: NYOwlRsjKmn37/W9BsRZ9JNHkouDqpQATG71AgjCYiU=)
3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:89:a6:23:fb:73:fc:e9:e9:8f:10:85:c5:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2
Validity
Not Before: Apr 30 09:00:59 2025 GMT
Not After : May 1 09:00:59 2025 GMT
Subject: CN=dd76deac273ca7a478e589ecb95d9d5f48bbe956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:9c:9f:33:26:b2:14:f5:5b:dd:06:79:38:
46:29:37:08:c9:8a:d6:8e:da:0c:cb:c7:5e:d6:44:
2a:9c:2c:52:c5:5a:25:74:de:cd:c1:eb:b1:dd:b9:
83:19:77:7f:fc:d5:37:8d:a0:a3:73:79:0a:81:17:
13:11:66:76:72:e9:df:42:0f:db:8b:f4:f6:78:15:
7c:e1:72:f1:37:9e:8b:9b:39:e6:5e:05:62:12:9e:
7e:e5:b6:60:95:70:c6:44:e8:43:2a:aa:e3:6b:6d:
07:85:4e:23:88:56:f8:cb:59:50:93:0e:6d:14:1c:
86:4b:7a:60:0c:dd:7e:f3:68:0b:c4:65:15:9e:ee:
b1:93:1a:97:3b:9b:8c:98:4d:83:3d:f0:bb:77:83:
30:f3:d1:f1:b2:91:6d:55:8c:a7:b6:f4:4c:28:89:
63:14:ab:e3:5b:18:9e:e8:df:ac:22:84:df:b6:3a:
a3:63:dd:71:18:c3:b5:e7:65:1b:1b:53:a5:05:a0:
9e:85:0e:8c:50:05:72:ea:a7:c7:a4:0b:3e:cb:b5:
14:e3:23:af:4a:5a:18:75:1b:5f:79:55:1f:9b:8d:
c8:a9:22:b8:3f:87:e1:38:e6:38:7f:98:91:0a:9f:
7d:95:cc:87:d1:84:96:ed:52:0b:ce:bc:83:4b:58:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:DE:AC:27:3C:A7:A4:78:E5:89:EC:B9:5D:9D:5F:48:BB:E9:56
X509v3 Authority Key Identifier:
keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b5:b9:39:04:f7:35:a6:62:15:ca:ac:52:51:e7:96:6a:f0:
f2:f5:56:b3:d6:75:19:23:2c:dd:b3:c6:d4:b6:21:ba:f7:3f:
07:ce:8e:49:2e:f1:83:6c:03:fb:b6:59:bb:13:c3:cf:68:d7:
22:c8:00:4b:ef:1b:84:aa:6d:81:49:6f:3d:c3:bb:d3:85:2d:
95:bf:92:1f:6a:4d:7d:bc:20:5d:32:87:9e:93:0b:b3:3b:43:
83:c9:86:6d:c9:36:b0:56:11:27:04:6e:d0:e5:e1:94:d7:ce:
a1:e8:c1:5f:3e:5a:01:97:0d:7c:02:e9:2b:19:a2:13:75:a2:
0b:64:df:1e:ad:81:eb:4f:d2:b9:a1:56:c3:78:6d:2f:ae:e0:
f3:01:7b:7d:ab:c0:bb:43:c5:47:fa:6c:b5:8a:29:51:a3:f8:
7d:95:ec:1f:c8:a4:1e:29:f1:12:af:0e:79:56:06:a0:9f:04:
8a:61:c1:56:ee:a4:f0:1b:ce:cf:ff:00:49:a1:b9:7a:1c:9a:
a9:ee:a7:1e:4c:6f:d8:65:98:8e:58:44:e4:a3:0b:37:46:fc:
39:10:23:21:05:70:12:ac:c9:9b:ef:aa:00:88:ef:e3:d8:07:
09:ae:38:84:3e:64:30:d5:db:71:4b:5f:0a:84:24:15:9c:42:
6e:d5:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:52:26 2025 by rpki-client